ef7aaa860d056387fdcff5251c53348633ed23b3d85d220e53e54102b2a1b9db | Triage

Sharing

Copy URL Twitter E-mail

General

Target

ef7aaa860d056387fdcff5251c53348633ed23b3d85d220e53e54102b2a1b9db
Size

24KB
MD5

13f8459786924b2df840632b0b4236de
SHA1

1fdda0f7e6a812e50a5b56d67cf8125556aec1c5
SHA256

ef7aaa860d056387fdcff5251c53348633ed23b3d85d220e53e54102b2a1b9db
SHA512

8e7ef0dcf7c18ece253486bbd9e319f316e8ebd0463b663c5bc8c187a646e528e742a4c7cb03b6ca06a82a673edab2b6bacdb456e6ea83e91ba2926997778aab
SSDEEP

384:ftfP2HYp/yFwZu/QZxl8nYKqv2yENrGW/UarnU8gyajuEh3Dy:JpIK6QrloY1+yENrGg7UXyajh3O

Score

N/A

Malware Config

Signatures

Files

ef7aaa860d056387fdcff5251c53348633ed23b3d85d220e53e54102b2a1b9db
.exe windows x86

4099ddc5a4cf72d27b12ed57e9ee26eb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
GetModuleHandleA
GetProcAddress
GetSystemTime
GetVersion
ExitThread
ReadFile
Sleep
VirtualAlloc
VirtualFree
WaitForSingleObject
ExitProcess
CreateThread
LoadLibraryA
CloseHandle

advapi32

RegEnumValueA
RegCloseKey
RegOpenKeyA

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1024B - Virtual size: 522B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE